About Promon
Promon sells the Runtime Intelligence Platform for apps, which embeds protection into compiled applications with no source code changes and no SDK. The Promon Runtime Intelligence Platform runs inside every protected application and is not added as an external layer or SDK. Every Promon product is part of the Promon Runtime Intelligence Platform, and each product belongs to one of four capability layers: Enforcement, Data, Intelligence, and Tools. Promon products share the same telemetry, controls, and deployment model, so a buyer can adopt one product or combine many.[2][3][6]
Shield is the base on which the Promon Runtime Intelligence Platform is built. Shield streams trusted telemetry out of the running app and feeds updated protection policies back in, while Shield continues to act autonomously. Shield protects mobile, desktop, web and SDK apps from the inside, embedded into the compiled build, with no code changes and nothing for a team to rewrite. Promon has worked on runtime app protection and app shielding for two decades. App shielding developed from university research.[3]
Shield for Mobile secures iOS and Android apps post-compile with no code changes. Shield for Mobile integrates into a CI/CD pipeline and supports all major build systems and frameworks. Shield for Mobile enforces runtime protections that align with global regulations like GDPR, PSD2, DORA, and CCPA. Raiffeisenbank released a new version of its mobile eKonto app. Promon protects Raiffeisenbank's mobile app users against malware and threats related to operating system weaknesses.[7]
Promon Shield for Desktop builds desktop application security into Windows and macOS apps. Shield for Desktop creates a secure execution environment for apps by blocking unwanted interactions initiated by possible malware residing on the system. Shield for Desktop integrates with existing tooling and supports zero-trust architecture.[8]
Promon Code Protect protects compiled code from static and dynamic analysis by applying multi-layer obfuscation and encryption post-compile. Code Protect integrates post-compile into any CI/CD pipeline. Promon Data Protect encrypts and isolates sensitive assets inside the app package and on the device. SAROM protects information built into an app, like API keys or certificates, before the app is published. SLS protects data stored on the device, like session tokens. Promon Verify ensures that only genuine, untampered apps can connect to backend APIs. Promon Verify authenticates each request through in-band attestation, confirming the integrity of both the app and its runtime environment. Promon Verify is fully self-hosted and stateless.[9][10][11]
Promon Control is a runtime configuration layer for Shield for Mobile protected apps. Promon Control is a post-deploy app security runtime control layer that lets teams manage runtime protection after an app is already live. Promon Control is the control plane for Shield for Mobile, allowing for continuous protection, autonomous threat response and granular policy tuning. Promon Insight for App Risk is a device-risk signal layer for mobile apps. Insight for App Risk collects, enriches, and delivers security-relevant signals from inside the app, powered by the in-app protection engine of Promon Shield. Insight for App Risk ranks devices by configurable risk scores. Promon Shield embeds directly into the app, collecting on-device signals like RAT detection, emulator activity, VPN use, active-call detection, and motion anomalies. Teams with an existing fraud platform feed signals directly into it, while teams without one get a purpose-built risk workspace.[3][12][13]
The telemetry, analytics and decisioning layer can run on prem, as SaaS, or hybrid. Prebuilt connectors feed high fidelity telemetry and decisions into existing SIEM, SOAR and data lake tools. Model Context Protocol endpoints let agents query live app posture and act on the loop, within guardrails that customers set.[3]
Promon states that it has spent two decades safeguarding global banks, gaming companies, public institutions and media giants. Promon protects payment apps and digital wallets against tampering, API abuse, and device-based fraud. Promon protects citizen-facing apps from tampering, repackaging, and data breaches. Promon protects patient data and prevents unauthorized access, and addresses compliance with healthcare regulations. Promon protects connected vehicle apps and in-car software from reverse engineering, data theft, and unauthorized access.[2][3][7][8][9][12][14]
Promon on the record